Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...

SUSE-SU-2026:4347-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. - CVE-2026-23451: bonding: prevent potential infinite loop in...

CVE-2026-77825 IBM ContextForge MCP Gateway is affected by path traversal

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...

CVE-2026-77825

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.8 is vulnerable to a path traversal flaw in the Admin API log-download endpoint (GET /v1/admin/logs/file). The vulnerability stems from the use of str.startswith() for path confinement, which lacks proper boundary validation. This allows an ...

CVE-2026-77825 IBM ContextForge MCP Gateway is affected by path traversal

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...

EUVD-2026-86011

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...

InfluxDB-Exploit-CVE-2019-20933

InfluxDB Exploit CVE-2019-20933 Exploit for InfluxDB CVE-2019-20933 vulnerability, InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret. Exploit check if serv...

CVE-2025-6554

CVE-2025-6554 Proof of Concept ⚠️ Security Research Project - This project is intended solely for security research and educational purposes. Do not use in production environments. 📋 Project Overview CVE-2025-6554 is a critical vulnerability in the Chrome V8 engine, involving the "Temporal Dead...

cve-2025-66478_rce_vulnerable

Modern Blog with shadcn/ui A modern and elegant blog built with Next.js 16, React 19, shadcn/ui and Tailwind CSS. IMPORTANT: Next JS VULNERABLE project created solely for educational, testing and exploitation purposes, NOT RECOMMENDED FOR PRODUCTION DEPLOYMENT, ONLY FOR LOCAL OR CONTROLLED...

cve-2026-33067

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template Nuclei template that detects CVE-2026-33017 — an unauthenticated remote-code-execution vulnerability in Langflow ≤ 1.8.2 reachable through the public flow-build endpoint: root@kitploit: POST /api/v1/buildpublictmp/flowid/flow The...

CVE-2024-48990-PoC

CVE-2024-48990-PoC What is needrestart and how does it work? Needrestart is a widely used utility on Linux systems default on many Ubuntu versions that checks after a software update whether any service or the system itself needs to be restarted. By analyzing running processes, it determines if...

DirtyCow

DirtyCow - Exploit Below code takes advantage of a known vulnerability Dirty COW CVE-2016-5195 to escalate privileges and get root access. Before running, uncomment sc for your platform within main.c. Compilation: gcc main.c -o dirtycow -lpthread...

CVE-2022-32532

CVE-2022-32532 about This is a demo project, which only shows one of the conditions for exploiting this vulnerability CVE-2022-32532. In fact, there are more ways to exploit it, as long as developers use RegExPatternMatcher, there will be a possible bypass vulnerability. introduce Token request...

CVE-2022-0848-RCE

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Change the host in bash file and run, then get the shell through RCE...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation As a security...

CitrixNetscalerAnalysis

Citrix Analysis Notebook A jupyter notebook to aid in automating some of the forensic analysis related to Citrix Netscaler hosts compromised via CVE-2019-19781. For help retrieving artifacts to examine see this Citrix triage script. All notes/suggestions are welcome. Feel free to submit pull...

n8n-cve-2025-68613-thm

CVE-2025-68613 – n8n Critical RCE Exploitation Overview This repository documents a hands-on exploitation of CVE-2025-68613 CVSS 9.9 , a critical Remote Code Execution vulnerability affecting the n8n workflow automation platform versions 0.211.0 through 1.120.3. This exploitation was performed...

CVE-2019-6447-in-Mobile-Application

CVE-2019-6447-in-Mobile-Application In this research report you can get completly idea about the CVE 2019-6447 in the real world application and explotations with example. If you want to created video for the exploitation please use below mentions link...

CVE-2025-63585

CVE-2025-63585 Blind Time-Based SQL Injection in /action/rtcomments/status parameter: timestamp A blind, time-based SQL injection vulnerability was found in the timestamp parameter of the /action/rtcomments/status endpoint. An authenticated attacker who can supply this parameter may be able to...